Skip to content
OpenAdvisories
High WID-SEC-2024-3622 13 CVEs

Pixel Patchday Dezember 2024: Mehrere Schwachstellen

Published Dec 5, 2024 · Updated Jan 14, 2025 · Revision 2 · de-DE

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Android ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen oder vertrauliche Informationen offenzulegen.

Product

Das Android Betriebssystem ist eine quelloffene Plattform für mobile Geräte. Die Basis bildet der Linux-Kernel.

Vulnerabilities 13

  • Critical 9.8

    In cc_SendCcImsInfoIndMsg of cc_MmConManagement.c, there is a possible out of bounds write due to a missing bounds chec…

  • High 7.8

    there is a possible to add apps to bypass VPN due to Undeclared Permission . This could lead to local escalation of pri…

  • High 7.8

    In construct_transaction_from_cmd of lwis_ioctl.c, there is a possible out of bounds write due to a heap buffer overflo…

  • High 7.8

    In prepare_response_locked of lwis_transaction.c, there is a possible out of bounds write due to improper input validat…

  • High 7.8

    there is a possible biometric bypass due to an unusual root cause. This could lead to local escalation of privilege wit…

  • High 7.8

    In prepare_response of lwis_periodic_io.c, there is a possible out of bounds write due to an integer overflow. This cou…

  • High 7.8

    In Exynos_parsing_user_data_registered_itu_t_t35 of VendorVideoAPI.cpp, there is a possible out of bounds write due to …

  • High 7.8

    there is a possible biometric bypass due to an unusual root cause. This could lead to local escalation of privilege wit…

  • High 7.8

    In startListeningForDeviceStateChanges, there is a possible Permission Bypass due to a confused deputy. This could lead…

  • High 7.5

    In sms_DisplayHexDumpOfPrivacyBuffer of sms_Utilities.c, there is a possible out of bounds read due to an incorrect bou…

  • High 7.0

    An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 2100, 1280, 2200, 1330, 1380, 1480, 2…

  • Medium 6.7

    In wbrc_bt_dev_write of wb_regon_coordinator.c, there is a possible out of bounds write due to a buffer overflow. This …

  • Medium 5.5

    In GetCellInfoList() of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. T…

Revision history

  1. #2

    Neue Updates aufgenommen

  2. #1

    Initiale Fassung

References